SUMMARY

• Cisco Certified Network Engineer with around 8 years of experience in testing, troubleshooting, implementing, optimizing, migrating and maintaining enterprise data network and service provider systems.
• Deals with Nexus models like 7K, 5K, 2K series, Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series and Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches.
• Experience on installing, maintaining and troubleshooting Check Point R75, R77.30 Gaia.
• Experience in Design and configuring of OSPF, BGP on Juniper Routers (MX960, MX480).
• Extensive understanding of networking concepts, (IE. Configuration of networks, router configuration and wireless security, VPN, Content Filtering, VLANs, and routing in LAN/WAN, Ethernet Port, Patch Panel and wireless networks.)
• Experience with design and deployment of MPLS Layer 3 VPN, MPLS Traffic Engineering, MPLS QOS.
• Experience in installing, configuring and troubleshooting of Checkpoint Firewall and Juniper SSG series and Smart View Tracker applications.
• Hands on Experience configuring and testing F5 iRules using Browser (IE), HTTP watch.
• Experience in testing Cisco routers and switches in laboratory scenarios and then design and deploy them on site for production.
• Implementing and Working knowledge of Frame relay, PPP, ATM, MPLS services, NAT, sub - netting, DNS, WINS, LDAP, DHCP, HTTP/HTTPS, TCP/IP, UDP, SNMP, IPsec, PPTP, VLAN, STP (Spanning tree Protocol), Tunneling and Access Control Lists.
• Well Experienced in configuring protocols HSRP, GLBP, VRRP, ICMP, IGMP, PPP, HDLC, PAP, CHAP, and SNMP.
• Implemented VDC, VPC, VRF and OTV on the Nexus 5548 and 7010 switches.
• Experience of working on Static routing, Default routing and dynamic routing protocols like EIGRP, OSPF, RIP, BGP and MPLS.
• Experience in configuring and Troubleshooting BIG-IP F5 load balancer LTM & GTM.
• Demonstrated experience in developing, implementing, auditing Checkpoint firewall (R77.30) configurations and analyzing, optimizing rule sets.
• Experience with Firewall migrations from PIX firewall to Cisco ASA and Juniper SRX firewall appliances.
• Working knowledge ofNetworkmonitoring/management tools like Wireshark, TCP Dump, Cisco Prime, Net Flow, Solar Winds and Riverbed.
• Extensive knowledge of WAN technologies such as T3, DS3, OCx, SONET, LTE & Frame relay.
• Worked on Juniper Net Screen Firewalls like SSG 140, SSG 550M, SSG 520M and Cisco PIX 535, 520, 515.
• Implementation, Configuration and Support of Checkpoint (NGX R75, R77), Cisco Firewalls (ASA 5505, 5506-X, 5585), Palo AltoNetwork Firewall models (PA-2k, PA-3k, and PA-5 k).
• Knowledge on AAA authentication servers such as TACACS+ and RADIUS.
• Involved in troubleshooting network traffic and its diagnosis using tools like ping, traceroute, Wireshark, TCP dump and Linux operating system servers.
• Understanding of JUNOS platform and worked with IOS upgrade of Juniper devices.
• Knowledge of Brocade switches, Fortigate firewalls and its configurations.
• Experience with Bluecoat Proxy servers, LAN & WAN management.

TECHNICAL SKILLS

Routers: Cisco routers (1900, 2600, 2800, 2900, 3600, 3800, 3925, 7200,7201, 7600, 7613, 9000), Juniper routers (M320, MX960, 480)

Switches: Cisco switches (2900, 3750, 4500, 6500) Nexus (3000, 5548, 6000, 7010)

Firewalls: Cisco ASA 5520, 5550, 5540, Juniper SRX 240, 5400, 5600, 5800, Juniper Net screen 6500, 5400 Palo Alto PA-3060/2050, Check point Firewalls NGX R75, R76 and R77.

Load Balancers: F-5 BIG-IP LTM (6400 and 8900)

WAN Technologies: FRAME RELAY, ISDN T1/E1, PPP, ATM, MPLS, leased lines, DSL modems and Fiber optic circuits

LAN Technologies: Ethernet, Fast Ethernet, Gigabit Ethernet, NAT/PAT, FDDI.

Routing Protocols: RIP, OSPF, EIGRP, BGP, Route Filtering, Redistribution, Summarization, and Static Routing

Switching Protocols: VTP, STP, RSTP, MSTP, VLANs, PAgP, and LACP.

IP Telephony: SIP, RTP, H.323, Voice gateways, CCM.

Wireless Technology: Cisco AP, LWAP, Access Points, WCS, Aruba

IPSEC/VPN Configuration: PIX to Router, Router to Router, PIX to VPN wildcard client, Router to VPN wildcard client, PIX to PIX, fully meshed configurations

Network management: SNMP, CiscoWorks LMS, HP OpenView, Solar winds, Ethereal, Wireshark

Ticketing tool: Remedy system, connect wise

Layer 3 Switching: CEF, Multi-Layer Switching, Ether Channel.

Carrier Technologies: MPLS, MPLS-VPN.

Gateway Load Balancing: HSRP, VRRP, GLBP.

Security Protocols: IKE, IPsec, SSL, AAA, Access-lists, prefix-lists.

Applications: Microsoft Office, MS Visio.

Languages: Unix, Turbo C / C++, basics in Perl and Shell scripting.

PROFESSIONAL EXPERIENCE

Confidential, NJ

Sr. Network Engineer

Responsibilities:

• Responsible for configuration, maintenance, and troubleshooting of dynamic routing protocols: BGP, OSPF & EIGRP (route redistribution, distribute lists, route-maps, offset-lists, prefix lists, route summarization, route-feedback, BGP attributes) on Cisco Routers 7613, 7201, and 3945E.
• Working knowledge of frame relay, MPLS services, OSPF, BGP and EIGRP routing protocols, NAT'ing, NAC product sub-netting, also including DNS, LDAP, DHCP, http, HTML, HTTPS, TCP/IP, UDP, SNMP, OSPF, RIP, IPSEC, PPTP, VLAN, STP (Spanning tree Protocol), RTSP & Multicasting protocols.
• Hands on experience and good working knowledge with Checkpoint Firewall policy provisioning.
• Hands on experience with Juniper EX-Series Ethernet Switches.
• Designed and Implemented Cisco 3750, 3550, 3560, 2924, 6509-V-E, 6513, 6504, 6503, 6506, 6500 series switches.
• Installed, configured and managed Cisco routers such as 7200 series, 3800 series, 3700 series, 2800 series and Cisco Catalyst switch series 6500, 4500, 3500, and 2900.
• Upgraded the data center network environment with Cisco ASA 5520. Configured ACL's on Cisco Switches as well as configured routers as terminal servers.
• Actively involved in switching technology Administration including creating and managing VLANS, Port security - 802.1x, Trunking 802.1Q, RPVST+, Inter-VLAN routing, and LAN security on Cisco Catalyst Switches 4507R+E, 6509-E and Cisco Nexus Switches 2232, 5596, 7009.
• Implementing 3750 Stackable switches using Cisco Stack Wise technology. Experience to review, evaluate current and future design issues as required maintaining network integrity, efficient data flow.
• Worked on Layer 2 protocols such as STP, VTP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment
• Involved in designing and implementing QOS and policy map to 2800 series routers for all the branches
• Experience with Branch Relocation: Connect workstation, servers, etc. Rack and stack Pre-configured new hardware and connect the circuits. Worked with Carrier to test and turn-up circuits.
• Performed IP address planning, designing, installation, configuration, testing, maintenance, and troubleshooting in complete LAN, WAN development.
• Involved in operations and administration of WAN consisting Ethernet Handoffs, T1, DS3, and Optic Fiber Handoffs.
• Supported EIGRP and BGP based on the network by resolving level 2 & 3 problems of internal teams & external customers of all locations.
• Installed wireless access points (WAP) at various locations in the company.
• Created dedicated VLANs for Voice & Data with QOS for prioritizing VOICE over DATA.
• Configured Voice ports and Dial peers on the call manager for the VOIP call to reach remote destination.
• Worked on configuration and commissioning of the MPLS circuits for various branch offices.
• Provided Daily network support for national wide area network consisting of MPLS, VPN and point-to-point site.
• Performed routine monitoring of Checkpoint firewall from security perspective and also troubleshooting the connectivity issues.
• Involved in configuring Checkpoint (R77) Firewall rule base and objects as per the requirements.
• Troubleshooting checkpoint firewall connectivity related issues using Smart view tracker.
• Experience in reviewing and recertification of rule sets and also involved in creation, validation and maintenance of enterprise check point (R77.30) firewall policies.
• Performed Network Security Assessment and implemented security improvements such as network filtering, SSH, AAA, SNMP access lists, VTY access lists, EIGRP MD5 authentication & HSRP authentication.
• Handled Network capacity planning, modeling, and traffic optimization and experience in using Netflow.
• Configured ACL's in Cisco 5520 ASA firewall for internet Access requests for servers, Protocol Handling, Object Grouping and NAT
• Responsible for Data Center Migrations and its operations including the change from 6500 switches to nexus series switches, configured VPC/VDC on nexus 2k, 5k and 7k.
• Implemented antivirus and web filtering on Juniper SRX 240 at the web server as well as configuration of F5 Big-IP LTM 6400 load balancers and experience working with F5 technologies (LTM, GTM, APM, V9, V10, V11)
• Managed the F5 BigIP GTM/LTM appliances to include writing iRules and everyday tasks of creating WIP and VIPs.
• Experience in deploying, configuring & maintaining F5 3DNS (Global traffic Manager) Controller and BigIP -LTM (local traffic manager) for wide area load balancing and global redirection using VPN and Proxy load balancing techniques.
• Worked in an Agile Scrum environment and with HPSM Change Control System
• Documented workflow process, managing and implementing standard policy and procedures.

Environment: Cisco Routers, Cisco Switches, Nexus 7k/5k/2k Routing protocols, F5, Load Balancer HSRP, VRRP, IPSEC VPN, VPN, QOS, ASA firewall, Load balancer, MPLS, VLANS, VTP, RSTP, ACL, NAT, IDS/IPS, SIP, RTP, RADIUS, TACACS+, Juniper SRX, ASR 9000, Catalyst 6500, Check point R77.

Confidential, Detroit, MI

Network Engineer

Responsibilities:

• Work with application developers and systems engineer to migrate applications and systems to a new Border Gateway network.
• Experienced of network monitoring and management utility: Tcpdump and Wireshark
• Troubleshooting and installing of CRS, ISR, GSR, ASR9000 and Nexus devices.
• Worked on Cisco Routers, Active /Passive Hubs, Switches, Cisco PIX Firewall, Nortel VPN Concentrators TCP/IP, NAT and Checkpoint ESX/GSX firewall.
• Experience working with Nexus 7010, 5020, 5548, 2148, 2248 devices
• Used Kiwi-Cat tools to manage configurations from desktop for network devices, including routers, switches and firewalls.
• Worked on Palo Alto firewalls PA-2050 in creating and implementing the policies required by the company.
• Experience on monitoring of QOS and analyze the traffic to troubleshoot any QOS related issues.
• Experience in WAN technologies like T1/T3, DS3, STM1 and STM4 circuit types
• Scripting for automation of processes for Windows Servers. Familiarity with main script languages like Power Shell, PHP, Shell, Perl, Python.
• Hands-on experience in the network management of circuits using TDM and Frame Relay network
• Installed and configured Routers, Bridges, Terminal Servers and CSU/DSU's to support WAN links.
• Experienced with RIP, RIPv2, EIGRP, OSPF, IS-IS, BGP, MPLS.
• Configured F5 GTM solutions, which includes WideIP, Pool Load Balancing Methods and monitors.
• Implemented SNMP on Cisco routes to allow for network management.
• Maintained a Network with more than 600 Network devices, some 20,000-end hosts, and the other Network devices like DHCP, DNS Servers, and Firewall Servers
• Cisco IPT Migration Projects from legacy PBXs with Nortel.
• Setting up VLANS and configuring ISL trunk on Fast-Ethernet channel between switches
• Worked on Data, VOIP, Security as well as wireless installations and technologies.
• Experience with Juniper SRX 240 Firewalls.
• Good experience with like checkpoint VSX, IDS, IPS as well as encryption techniques.
• Performed IOS upgrades on Catalyst 3750, 2950, 1900 switches, and 3600, 2600 and 2500 routers.
• Installed and configured DHCP, DNS Server.
• Worked on Solar winds Orion for analysis and monitoring purposes
• Responsible for Cisco ASA 5540 administration and checkpoint firewall provider-1 across our global networks

Environment: Tcpdump, Wireshark, ASR series, Nexus devices, Juniper SRX, Checkpoint firewall, Palo alto, ASX, IDS, IPS, DHCP, DNS, Orion, ACL, PBX, Nortel, Juniper routers, Load Balancing, Routing Protocol, VLAN, Frame Relay, Trunking, VoIP, NAT, PAT, TCP/IP, Security, Vulnerability, Kiwi-Cat Tool, TACACS, RADIUS.

Confidential, Mclean, VA

Network Engineer

Responsibilities:

• Experience working with Cisco IOS-XR on the ASR 9000 devices for MPLS deployments
• Experience with design and implementation of Data center migration at NBC Universal.
• Planning and Implementation of Subnetting, VLSM to conserve IP addresses.
• Worked on configuring and troubleshooting DMVPN on Cisco 3925 router in our data center environment.
• Worked on installing, configuring and troubleshooting Juniper routers (MX480,960)
• Worked extensively in Configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/ routing/NATing with firewalls as per the design.
• IOS upgrade in Nexus 7010 through ISSU (In service software upgrade).
• Provided Load Balancing towards access layer from core layer using F5 Network Load Balancers.
• Implementing, Monitoring, Troubleshooting and Convergence in Frame-Mode MPLS inside the core.
• Configured and designed LAN networks with Access layer switches such as Cisco 4510, 4948, 4507 switches as well as Implemented ATM/Frame Relay between data centers.
• Designed & implemented DMZ for Web servers, Mail servers & FTP Servers using Palo alto PA-3060.
• Commissioning & decommissioning, configuring, URL and Web filtering, SSL Certificates, monitoring, SNMP traps, logging, blocking on Palo Alto PA-3060, migrating from one network to other.
• Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls PA-3060.
• Implemented Zone Based Firewalling and Security Rules on the Palo Alto Firewall
• Configured and maintained IPSEC and SSL VPN on Checkpoint Firewalls.
• Taking backup of checkpoint configuration, security policies, logs with policy package management, database revision controls, upgrade export and import, snapshot procedure on regular basis.
• Worked on Blue Coat Proxy SG to safeguard web applications in extremely untrusted environments such as guest Wi-Fi zones.
• Configuration of Fabric path and connectivity between Nexus 5K and Nexus 7k
• Hands-on experience in the network management of circuits using TDM and Frame Relay network, performing configuration and provisioning management, fault management and performance monitoring.
• Worked on Solar winds monitoring tool for eliminating IP issues and also managing DNS, DHCP and IP addresses.

Environment: TDM, Frame Relay, Datacenter, WLAN, Nexus 5k/7k, WAP, Unix, Linux, Trunking, F5 Load Balancer, FTP, BPDU Guard, Wi-Fi, CDMA, Cisco IOS-XR, ASR9000 devices, Nexus 7k, 5k and 2k switches, Subnetting, VLSM, Check point, Juniper routers

Confidential

Network Engineer

Responsibilities:

• Configuring Static, IGRP, EIGRP, and OSPF Routing Protocols on Cisco 1900, 2600, 2800, 2900, 3600 series Routers.
• Perform hardware and software diagnostics, fault isolation and coordinate repairs and/or replacement of faulty equipment.
• Design OSPF areas for reliable Access Distribution and for Core IP Routing.
• Configured various LAN switches such as CISCO CAT 2900, 3750 switches.
• Performed IPv4 addressing using FLSM, VLSM for allocating subnets, CIDR and also in allocating private addresses.
• Implemented IGMP, IGMPV2 protocols for IP multicast traffic distribution
• Supported Multi-Protocol Layered Switched (MPLS) WAN to enhance inter-office connectivity between Hyderabad and Bangalore sites.
• Worked on operating Protocol independent multicast routing in sparse mode.
• Configured inside ACL and interfaces, outside ACL and interfaces, NAT and PAT policies.
• Monitored network for optimum traffic distribution and load balancing using Solar winds.
• Real-time network monitoring using HP Open View by implementing policies and creating custom events.
• Configured BPDU Guard, port-fast, uplink fast and other spanning tree features.
• Configured Site-to-Site IPsec VPN tunnels to peer with different clients and each of client having different specifications of Phase 1 and Phase 2 policies using Cisco ASA 5505 series firewall.
• Analyzed network traffic using analyzer using Wireshark.

Environment: Cisco 2900, 3600 routers, Cisco 2900, 3750 switches, Cisco ASA Firewalls, STP, VLAN, VTP, VPN, NAT, OSPF, BGP, EIGRP, Cisco Switches, HP open view, Wireshark, Solar Winds.

Confidential

Jr. Network Engineer

Responsibilities:

• Migration of RIP V2 to OSPF, BGP routing protocols.
• Preparing Client Machines for users with Operating Systems, Software, antivirus and required utilities.
• Perform daily maintenance, troubleshooting, configuration, and installation of all network components.
• Configuration of CISCO Routers (2800, 3600 Series) and 2900, 3750 series switches.
• Enabled SNMP traps for our Cacti Monitoring tool to monitor traffic and check the regular health of Servers and Network Devices
• Implemented and Configured IP Routing Protocols: OSPF, EIGRP, and RIPv2
• Created network diagrams under senior supervision using MS VISIO.
• Implemented and configured LAN Protocols: Ethernet, VLANs, VTP and STP.
• Worked with Remedy Ticketing tool in maintaining and keep a track of logs/monitor
• Designed and implemented IP Addressing, Subnetting, Route Summarization and Route Distributions

Environment: Cisco 2800, 3600 routers, Cisco 2900, 3750 switches, LAN, WAN, Subnetting, VLAN, VTP, VPN, NAT, OSPF, BGP, EIGRP.